Announcing the release of Apache 2.4.28
This release includes:
APR Version: 1.6.2
APU Version: 1.6.0
Brotli Version: 1.0.1
LibXML2 Version: 2.9.5
LUA Version: 5.1.5
NGHTTP2 Version: 1.26.0
OpenSSL Version: 1.0.2l or 1.1.0f
PCRE Version: 8.41
SQLite3 Version: 3.20.1
ZLib Version: 1.2.10
VC14 Expat Version: 2.2.4
VC9 & 11 Expat Version: 2.2.3
Expat went C99 coding style in one file and doesn't build on VC versions below 12 which is why the difference. That said, Expat version 2.2.3 was a security release fixing CVE-2017-11742 DLL hijacking vulnerability in Windows and 2.2.4 just has one other minor bug fix.
You can get your copy of the new Apache HTTP Server from our download page (http://www.apachehaus.com/cgi-bin/download.plx).
Change Log (http://www.apache.org/dist/httpd/CHANGES_2.4.28) for Apache 2.4.28